PRIVACY NOTICE
Maths Investigation Rooms is operated by Iulia Iuliana Radulescu, the data controller, who is registered with the Information Commissioner’s Office (ICO). Personal information is handled under the UK GDPR and Data Protection Act 2018.
When you enquire, register or pay, information may include the participant’s name, parent or guardian’s name, contact details, selected room, school year, payment status and information you choose to share that is relevant to participation or support. Stripe processes payment-card details; full card details are not received or stored by Iulia.
Information is used to respond to enquiries, arrange and provide the room, communicate access or timetable information, manage payments and cancellations, support safeguarding, keep appropriate business records and meet legal obligations.
Most information is used because it is necessary to take steps before, or fulfil, the service agreement. Some records are kept to meet legal obligations or for legitimate business and safeguarding interests. Where consent is the appropriate basis, it can be withdrawn.
Information is shared only where needed with service providers supporting registration, payment, communication and delivery. These may include Tally, Stripe, Zoom, the website host and email provider. These providers process information under their own security and privacy arrangements, and some may process data outside the UK using lawful transfer safeguards.
Registration and payment for a participant under 18 should be completed by a parent or guardian. Only information reasonably needed to provide the service and protect participants should be submitted. If health, disability or other sensitive information is voluntarily supplied to support participation, it is used only when an appropriate lawful basis and additional data-protection condition apply, including explicit consent where required. Rooms are not recorded.
General enquiries are normally kept for up to 12 months after the last meaningful contact; limited learning notes normally for up to 12 months after the final session; and booking, agreement and complaint records normally for up to three years after the service ends. Financial records are kept for the period required by tax law. Safeguarding records are retained only for as long as necessary and proportionate. A record may be kept longer where needed for a legal claim, tax enquiry, safeguarding matter or regulatory obligation.
Depending on the circumstances, you may ask for access to personal information, correction, deletion, restriction, objection or transfer. You may also withdraw consent where consent is being used.
Reasonable access controls, password protection and device security are used for this sole-trader service. If a personal-data breach occurs, the risk will be assessed and the ICO and affected people will be notified where the UK GDPR requires it.
For a privacy question or to exercise a data-protection right, email contact@iuliaiuliana.com. You may also complain to the Information Commissioner’s Office if you remain concerned.
The complete service and safeguarding terms are available on the Parent Service Agreement page.
Last reviewed: August 2026. This notice will be reviewed when the service or the tools used to provide it change.